Hi,
I am running sudo 1.6.8p9 on a Solaris 8 server. I
have a number of users, who's profiles immedialely run
a "sudo su - helpdesk", from their .profile, to gain
access to a Solaris Role called helpdesk. Once the
users enter the role, they are presented with a menu.
The reason for this is to prevent users from logging
into a generic account. In short, this provides us
with an audit trail of who's accessing the role.
I have been asked to implement a script to log the
user onto a database. However, the logon script needs
to the original user
account. From reading the man page, I noticed that the
SUDO_USER
environmental variable should fit the bill.
When i try to log on as the user, the enviorment is
set to:
**********OPERATOR*********
PATH=/usr/bin
TERM=vt100
HOME=/export/home/helpdesk/hdb
SHELL=/bin/ksh
LOGNAME=root
USER=root
SUDO_COMMAND=/usr/bin/env
SUDO_USER=hdb
SUDO_UID=1111
SUDO_GID=2360
*******************************
After the sudo su - helpdesk is executed, the
environment
is set to:
**********HELDESK ROLE*********
PATH=/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin
TERM=vt100
HOME=/darren/helpdesk
SHELL=/bin/pfksh
LOGNAME=helpdesk
USER=helpdesk
SUDO_COMMAND=/usr/bin/env
SUDO_USER=helpdesk
SUDO_UID=9000
SUDO_GID=2630
*******************************
Is there any way to peserve the original SUDO_USER ? I
could
always use the output of `who am i`, but I would like
to see
if there was some way to get this information via
sudo.
Regards,
Darren